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Docket No.: 11602-003001 

Financial Account Management 

This invention relates to on-line personal financial account 
management. 

Access to personal financial accounts, including credit card 
accounts, debit card accounts, checking accounts, savings accounts, and 
investment accounts, is often governed by an account number, sometimes 
in combination with a password or personal identification number (PIN). 
When the holder of the account wants to perform a transaction using one 
of the accounts, he typically must expose the account number and the 
password or PIN to third parties. A dishonest third party can use the 
account number to perform fraudulent or otherwise unauthorized 
transactions to the full extent of the account balance or limit. For this 
reason, consumers, for example, are wary of providing credit card account 
numbers through the Internet to on-line retailers to purchase products. 

Credit card fraud is widespread. For example, the Credit Card 
Management magazine has reported Master Card International's 
20 worldwide fraud losses at $462 million in 1996, $466 million in 1997, and 
$530 million in 1998. With the growing popularity of on-line shoppers 
using their credit and bank accounts over the Internet, the rate of credit 
crime is expected to increase significantly. The CRN Business Weekly 
has reported that e-retailers experience between 15% and 40% fraud rates. 

25 

The invention reduces the risk of loss to a user of financial 
accounts. In general, in one aspect of the invention, a holder of a financial 
account predefines a virtual account associated with the financial account. 
The virtual account has an associated limitation on a payment to be made 
, 30 from the financial account. In connection with a transaction, information 
about the virtual account is provided to a third party. A third party uses 
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the virtual account information to make a request for a payment. Any 
payment from the financial account that is outside of the limitation 
associated with the virtual account is prevented. 

In another aspect of the invention, checks may be drawn on a 
virtual account. A recipient of a check drawn on the virtual account may 
validate the availability of funds electronically, and may collect the funds 
specified by the check electronically, for example through the web site of 
an intermediary. As soon as a check drawn on the virtual account is 
issued, the funds specified by the check are automatically withdrawn from 
a financial account associated with the virtual account. As a result, the 
check provides the security for the recipient of a conventional certified 
check. The check also provides security to the holder of the virtual 
account, for example because the check cannot be fraudulently altered to 
an amount that is outside the limitation associated with the virtual account 
because if it were so altered it would not be validated. 

Some implementations of the invention are described in the 
following text. 

Figures 1 through 13 show aspects of implementations of the 
invention that are explained in the text. 

As shown in figure 1, a user 10 can manage funds in financial 
accounts 12 (e.g., credit card accounts, debit card accounts, checking 
accounts, savings accounts, and investment accounts) that are held by the 
user in financial institutions 14. The user can manage the funds using so- 
called virtual accounts 16 that are part of a user file 18, which is 
maintained on the user's behalf by an intermediary 20. The user can use 
the virtual account to conduct transactions with third parties 21 that 
involve funds in the financial accounts. Conducting a transaction requires 
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an active financial account 12 and an issued (validated) virtual account 16. 
The virtual accounts enable the user, among other things, to limit the risk 
of theft of funds from the financial accounts in pre-defined ways that 
depend on the context in which transactions are to occur. The 
intermediary provides similar services to a large number of users and with 
respect to a large number of financial accounts. 

The following discussion focuses on the example of a consumer 
using a virtual account to make on-line purchases from an epommerce 
retailer. Of course, this is only one example, and other types of parties 
could use virtual accounts to conduct transactions for other purposes. 

To make use of virtual accounts, the consumer first registers with 
the intermediary either through the intermediary's website 23 or by 
telephone or mail. In any of the registration methods, the user provides 
information, described below, that will define the user's file 18 maintained 
by the intermediary. 

As shown in figure 2, the user file 18 includes: 

• an eCard number 24 that is associated with the user for use 
in connection with transactions that are to be paid from 
funds in the accounts; the eCard number can be evidenced 
on a physical card given to the user for presentation to 
other parties to the transactions. 

• a name, address, and other identifying information 26 of 
the registered user. 

• a list of registered financial accounts 28 that the user 
designates to be part of the file; each financial account is 
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identified by the account number, the financial institution, a 
shorthand name assigned by the user (e.g., "BankBoston 
Joint Checking Account"), an authorization telephone 
number for the financial institution. 

5 

o a list of registered fund receiving parties 30 that the user 
designates to be part of the file; each account is identified 
by a name and address. 



10 o a file password 32 that enables a user to confirm his 

authorization to have access to the user file 1 8. 

o one or more virtual accounts 34. 

15 The information in the user file can be modified from time to time 

by the user through the intermediary's website or by telephone or mail. 
The file password is required as a condition to making a modification. 

Once the user is registered, he may manage (create, modify, and 
20 delete) one or more virtual accounts 34. The virtual accounts are managed 
through the intermediary's website or by telephone or mail. Access to 
create a virtual account requires use of the user's name and file password. 
Access to modify and delete a virtual account requires use of the virtual 
account password (mentioned below). 

25 

As shown in figure 3, each of the virtual accounts 34 in the file 
includes 

o a virtual account name 36 (between one and sixteen 
30 numbers or letters). 
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o an indication 38 of which registered financial accounts are 
available for use in the virtual account and a specific dollar 
limit that is to be available from each of the financial 
accounts. 

o an indication 40 of which registered fund receivers are 
authorized to receive funds in the virtual account and a 
specific dollar limit that may be paid to each of the 
receivers. 

o an indication 42 of the number of occasions on which the 
virtual account may be used. 

o an indication 43 of an expiration date of the virtual account. 

o a virtual account password 45 selected by the user. 

When the virtual account is being managed on-line, one 
mechanism for controlling the information in the account is a virtual 
account submission form, for example, the form shown in figures 4 and 5. 
(Figure 4 is a blank form and figure 5 is an example of a completed form.) 
The form may be displayed to the user as a web page on the web site 
hosted by the intermediary. The initially displayed uncompleted form 
includes the existing eCard number 24 of the user, the customers name 
and address 47, and a list of shorthand names of all registered financial 
accounts 46. Each financial account has a check box 48 and a box 50 to 
indicate an upper dollar limit on funds that may be drawn from the 
financial account in connection with the virtual account. 

The virtual account form also includes boxes identifying receivers 
of funds 52 in connection with the virtual account. The receivers may be 
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chosen from among all of the registered receivers using a drop down list. 
A box 54 next to each receiver shows a maximum limit of dollars that can 

be paid to the receiver in connection with the virtual account. 

» 

Boxes 56, 58 are provided to indicate whether a single or multiple 
purchases are permitted for the virtual account. A box 59 shpws the 
expiration date of the virtual account. 

The virtual account name can be selected by the account holder 
(user), in which case the virtual account is called a virtual-transaction- 
order (VTO), or by the account issuer (intermediary) in which case the 
virtual account is called an express-transaction-order (ETO). A box 60 
contains the virtual account name (VTO) selected by the user. A check 
box 61 is provided to select an ETO in which case the user does not select 
the name. A box 62 provides a place to type the virtual account password. 
A submit button 64 enables a registered user to submit a new or modified 
form for processing to create a new or modified virtual account. After 
clicking the submit button 64, if the user selected an ETO by checking the 
box 61, the user is informed of the ETO (one to ten numbers or letters) on 
an ETO information screen (not shown) and told to record the ETO and 
keep it in a safe place. 

By clicking on the fill-in forms button 66 the user's name, address, 
e-card number and virtual card number are automatically transferred into 
the appropriate boxes in the shopping cart page of a merchant at which a 
purchase is being made. 

Links 70 enable the user to perform other functions including 
reading a message from the intermediary, reviewing the status of his file, 
viewing virtual accounts, viewing transactions performed using virtual 
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accounts, sending a message to the intermediary, and canceling the 
account submission. 

When the virtual account is being managed by telephone, one 
5 mechanism for controlling the information in the account is a telephone 
access system that uses, for example, a method 130 shown in figure 6. 
The method begins when a user calls 129 a phone number of an eCard 
system. The eCard system is an automated telephone system that uses 
recorded voice prompts and touch tone (dual tone multi-frequency) 
10 responses, but alternatively the communication can be by live 

conversation between the user and a customer service representative. 
Once the user has telephone access to the eCard system, in the case of 
automated response, the user chooses between standard procedures 131 
and speed procedures 133 by pressing one key for "standard" or another 
15 key for "speed," the keys being verbally identified to the user (132). In 
other examples, the user may not be offered a choice. 

In either the standard procedure or the speed procedure, the user 
may press a predefined one-key sequence or two-key sequence, identified 
20 when the user accesses the system, at any time during the call to have the 
option of canceling his previous entry and/or canceling the transaction. 

In the standard procedure, the user enters an eCard number (134) 
and a user file password (big key) (136) using his telephone keypad. Once 

25 the eCard number and the user file password are verified as accurate, the 
user selects a financial account for which he wants to earmark funds for 
allocation to a virtual account (138). For purposes of selecting an account, 
the system gives the user with a number of account options, such as "enter 
one for Visa, enter two for MasterCard, three for Discover, or zero for 

30 another account." Pressing zero in this example could provide the user 
with another automated list of account choices and/or the user may be 
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prompted to verbally identify the desired account after he.aring a "beep." 
After selecting an account, the system 130 inquires if the user wants to 
identify another account from which funds are to be allocated to virtual 
accounts (140). If so, the user is directed back to item 138. If not, the 
5 system proceeds. For each selected financial account, the user enters the 
amount to allocate from that financial; account (an upper dollar limit) (142) 
by, for example, pressing "2-0-0-0-0" for $200.00. 

The user may then be presented with account options, each of 
10 which the user can select by pressing an identified key. Each option can 
be selected any number of times, including multiple times. One option 
includes hearing the total balance of available funds in the user's eCard 
account (144). Another option includes inputting the designated receiver 
of the selected eCard funds by clearly stating the name and/or phone 
15 number of the fund receiver after hearing a "beep" (146). Alternatively, 
the system could present the user with a number of fund receiver options 
and a key to press to verbally identify a fund receiver in a procedure 
similar to selecting an account. Another option includes entering the 
expiration date of the account (148) by, for example, pressing "0-3-2-0-2- 
20 0-0-0" for March 20, 2000. 

Another option is issuing a virtual account (150). Issuing the 
virtual account finishes the transaction. The user chooses between 
entering a virtual account name (VTO) or being provided with one (ETO) 

25 (164). For a VTO, the user enters the virtual account name using the 
telephone keypad or by verbally identifying the name after hearing a 
"beep" (166). For accuracy and added security, the user is prompted to 
reenter the virtual account name (168). The user is also prompted to enter 
his virtual account password (small key) (170). For an ETO, the user 

30 verbally hears the virtual account name (172) and is told to record the 
ETO and keep the ETO in a safe place. The ETO may be repeated to 
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ensure that the user accurately records it. The user also enters a virtual 
account password (170). Once the virtual account is created, the user may 
choose to create another virtual account (152). If so, the steps are the 
same ones shown beginning at item 136. If not, the system terminates the 
call, possibly first informing the user how to again access item 132 or 
other item in the system. 

If the user chooses the speed procedure, the user enters the last 
four digits of his eCard number (154) and the last four digits of his social 
security number (156). Instead of entering part of a social security 
number, the system 130 could ask for another unique user identifier such 
as the file password. The user then selects the amount of the funds he 
desires to allocate from a recorded list (158), such as "press one for 
$200.00, two for $500.00, and three for $1000.00." The user also enters 
the virtual account name (160) and the virtual account password (small 
key) (162). The speed procedure may instead offer the user a choice 
.between a VTO or an ETO or automatically provide the user with an ETO. 
After the password is verified, the virtual account is created. Having 
issued the account, the system 130 terminates the call, possibly first 
informing the user how to again access item 1 32. 

Whenever a new or modified virtual account is created, the 
intermediary verifies with the financial institutions that maintain the 
accounts involved, that the amounts indicated for those financial accounts 
in the virtual account are available from the financial accounts. The 
intermediary also arranges for the financial institutions to reserve those 
amounts against the possible use in the virtual account. Once the amounts 
have been verified and reserved, the intermediary confirms the validity of 
the new or modified virtual account to the user. 
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Before virtual accounts are set up and used, the intermediary pre- 
arranges with ecommerce vendors to accept the eCard number and virtual 
account numbers from users who are registered with the intermediary. 
The ecommerce vendors may include on their shopping cart or similar 
5 web pages the ability for the user to indicate that he is an eCard holder. 
Space also may be provided for the user to enter the eCard and virtual 
account numbers. Alternatively, the ecommerce vendor may accept the 
eCard and virtual account information in a box provided for alternative 
payment arrangements other than commonly available credit cards such as 
10 Visa. 

As seen in figure 7, for interacting with the intermediary on the 
World Wide Web, a registered user can install a linking icon 80 in a tool 
bar of his browser. The toolbar, and therefore the icon remains, active 

15 without regard to the web sites being visited in the main window 82 of the 
browser. If a user were visiting the amazon.com site, for example, and 
wished to manage a virtual account, say for the purpose of configuring it 
for making a purchase from amazon.com, he would click on the icon 80, 
which would open a window for a user to log onto the web site of the 

20 intermediary. 

The window 84, shown in figure 8, includes a box for a user name 
and a user password (which is the file password mentioned earlier). After 
typing his name and the password and clicking the submit button, the 
25 server of the intermediary's web site would verify the password 
information. Then the server would display the virtual account 
submission form 86 part of which is shown in figure 9. 

Purchases can be made either electronically or in person at stores. 
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As seen in figure 10, when the vendor is asked for credit card 
information, the user enters his eCard number and his virtual account 
identifier (100). Upon confirming the order, the web vendors server 
automatically submits the eCard and virtual account information to the 

5 intermediary's server for payment (102). The intermediary's server 

confirms that the eCard and virtual account are valid and that the vendor's 
identity and the payment amount are within the limits specified in the 
virtual account (104), including the limits with respect to amount, time, 
and number of transactions (otherwise, the transaction is refused.) If the 

10 limits have not been violated, then the intermediary confirms the 

transaction back to the vendor (106) and pays the amounts to the vendor! 
The intermediary server divides the charge amount among the financial 
accounts for that virtual account and issues payment requests to the 
financial institutions that maintain those accounts (108). The payments 

15 are made in the usual course (110) and the user is billed by the financial 
institution (112). If the intermediary has a pre-arrangement with the 
financial institution, the intermediary may be able to interact with the 
financial institution using the eCard number directly. Otherwise, the 
intermediary uses the account number (for example, the credit card 

20 number) established by the financial institution. 

In the case of a purchase in person at a store, the user presents the 
eCard to the merchant (120). The merchant swipes the card on a reader 
(122). A call is then automatically made to a phone number provided on 
25 the magnetic stripe of the eCard (126). The call is connected to the 

intermediary (128). The user enters the desired virtual account identifier 
on a keypad (124). From that point, the steps are the same as the ones 
shown beginning with item 104. 

30 A user may distribute virtual accounts to trusted individuals in a 

manner that would control the amounts that the trusted individuals could 
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spend from the financial accounts. For example, a parent pould provide a 
virtual account to a child for use on at a college bookstore. In effect, the 

individual can create any number of specially defined virtual accounts 

i 

using his financial accounts as the sources of funds, with strict limits on 
the payments that may be made from the financial accounts, and without 
concern that the full amounts or limitsiof the financial accounts would be 
at risk of fraud. 

The intermediary may also provide virtual deposit accounts for 
users that could earn the same interest as bank accounts. The user would 
deposit the money into a virtual deposit account and the intermediary 
would in turn deposit the money into a financial account chosen by the . 
user. 

Bill paying services can also be provided by the intermediary to 
enable the users to pay bills automatically and electronically from the 
financial accounts at times and in accordance with limitations defined by 
the user. 

A user may also write checks to be drawn on a virtual account that 
has been set up by the user. To provide this service, the intermediary may 
have a relationship with a banking services provider which will interact 
with the user's financial institution and other financial institutions at 
which the checks are deposited to process the checks. 

An example of such a check is shown in Fig. 1 1 . The check (200) 
includes the following information: a blank (202) to be filled in with the 
name of the recipient of the funds in the virtual account, blanks (204, 206) 
to be filled in with the amount of the funds to be drawn from the virtual 
account, a blank (208) for the date of issuance of the check, the name and 
address information (210) for the user, the logo and name (212) of the 
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banking services provider, and information (214) explaining to the 
recipient how to validate the virtual account before cashing the check. 
The check also includes the bank route number (216) of the banking 
services provider, the user's eCard number (218), and the name of the 
user's approved VTO or ETO (220). The check may also include a memo 
line (222), e.g., to allow the user to note the purpose of the check. 

Before the user can generate a check, the user must have an 
approved VTO or ETO, as discussed above. After obtaining an approved 
VTO/ETO, if the user is using the website hosted by the intermediary the 
user can proceed to a web page that displays a check issuer form, for 
example, the form shown in Fig. 12. The form includes the following 
fields to be filled in by the user: the eCard number (224) of the user, the 
approved VTO/ETO name (226), the recipient of funds in the VTO/ETO 
(228), the recipient's address (230), if the user wishes the intermediary to 
mail the check directly to the recipient, and the amount of funds to be paid 
to the recipient (232). The rest of the information on the check (discussed 
above) will be filled in automatically by the server. Once the user has 
completed the user-defined fields, the user can click on the "view your 
check" icon (234) to see a displayed image of the check. If desired, the 
user can then edit the fields. When the user is satisfied with the content of 
the check, the user can click on a button (not shown) indicating to the 
server that the check should be issued. Instead of a web page with a check 
issuer form, the website may include a Wizard® application that would 
guide the user through the check issuing process. 

As soon as the check is issued, the intermediary electronically 
collects the funds from the user's designated financial institution. Once a 
check has been issued in this manner, the user can choose to print the 
check, send it electronically to the recipient using email, or have the 
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intermediary mail it to the recipient, by making an appropriate selection on 
a subsequent web page (not shown). 

If the user is managing the user's virtual accounts by telephone, 
5 rather than through the website, the user can request that a check be issued 
and enter the information in the user-defined fields discussed above either 
via an automated telephone system that uses recorded voice prompts and 
touch tone responses, or via a live conversation between the user and a 
customer service representative. The user may request that the check be 
10 mailed, emailed or printed and faxed to the user or a recipient. 

After the user gives the check to a recipient (or after the recipient 
receives it through mail or email), the recipient can verify the availability 
of the funds by calling the intermediary or visiting the intermediary's 
15 website and providing the VTO/ETO information on the check. 

To collect the funds, the recipient can either deposit or cash the 
check at his financial institution, as with a conventional check, or request 
payment from the intermediary. The recipient may request payment by 

20 contacting the intermediary. A payment request may be made by 

accessing the web site of the intermediary and filling out a collect funds 
form, for example, the form shown in Fig. 13, which is displayed at one of 
the web pages of the web site. The form includes four parts. Part I (240) 
is to be filled in if the person or institution requesting payment is not a 

25 member who has registered with the intermediary, and includes fields for 
the name, address, telephone and email address of the requestor. The 
requestor is also given the opportunity to click on button 243 to access a 
registration page (not shown) through which the requestor can become a 
registered user. Part II (242) is to be filled in if the requestor is a 

30 registered member, and includes fields for the requestors eCard number 
and user file password (big key). Part III (244) is to be filled out by all 
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requestors, and includes fields for the eCard number of the payor of the 
check and the VTO/ETO number on the check. Part IV, also to be filled 
out by all requestors, allows the requestor to indicate how he would like to 
receive the funds. When the requestor is finished completing the form, he 
can click on the submit button 248 to submit the form to the web server 
for processing. 

The collect funds form shown in Fig. 13 may also be used by the 
recipient of funds in any of the types of transactions (e.g., online 
purchasing) that have been discussed above. Thus, to use the collect funds 
form a requestor does not need to have a check, but need only have a valid 
VTO/ETO number. 

If the recipient deposits or cashes the check at a financial 
institution, the financial institution will generally use the routing number 
of the intermediary's banking services provider to process the check in a 
conventional manner, i.e., as a normal bank exchange using the Federal 
Reserve. 

A check drawn on a user's virtual account can be used in any of 
the ways in which a conventional personal check is used. The check can . 
also be used in situations in which a certified check is required, and in 
situations in which an out-of-state check would not be accepted. This is 
because the recipient of the check can readily verify the availability of the 
funds, as discussed above, and can be certain that those funds cannot be 
withdrawn from the user's account before they are paid to the recipient. 
As discussed above, the funds are electronically withdrawn from the 
user's financial account at the moment the check is issued, and remain in 
the VTO/ETO until the recipient or the recipient's financial institution 
requests payment. Thus, the recipient is assured that the user cannot 
practice the fraud known as "check kiting", i.e., the user cannot give a 
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check to the recipient and then withdraw the funds needed to cover the 
check from his account before the recipient is able to cash the check. If 
the user were to subsequently attempt to present the same check for 
payment, the check would immediately be rejected because the VTO/ETO 
controlled limits would already have been met. 

Checks drawn on a user's virtual account may also be used in 
much the same manner as "travelers' checks" are used. A user could 
establish one VTO/ETO to be used for all checks used during a particular 
trip, or could establish a separate VTO/ETO for each check. 

Among the advantages of the invention are one or more of the 
following: 

A highly secure, flexible, and reliable system is provided to 
manage various personal accounts on-line. Fraud is deterred and the 
credibility of payments is increased for retailer industries, especially e- 
retailers. Losses to creditors and individual cardholders are also reduced. 
The system can be used to generate to generate one-time-valid virtual 
accounts for on-line purchases without worrying about stolen account 
numbers, fraud, hidden costs, and wrongful charges. 

The risk of loss from the financial accounts is reduced to the 
amount of the transactions authorized by the virtual accounts and is 
distributed among the virtual accounts. Even if a virtual account number 
were stolen, the enforcement role played by the intermediary would assure 
that the loss would not exceed the amount authorized in the virtual 
account. The user would not need to use or release to vendors any of his 
financial account numbers. The user can consolidate transactions for all of 
his financial accounts in one intermediary file and manage them all using 
virtual accounts. 
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Other implementations are within the scope of the following 
claims. For example, other kinds of limitations can be defined in the 
virtual accounts and enforced by the intermediary. 
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